Privacy Policy

Last updated October 8, 2026

This policy explains what personal data Leapsteps collects, why we collect it, who processes it for us, how long we keep it, and the choices you have. It covers the Leapsteps apps for iPhone, iPad, Android, Mac and Windows, and this website, leapsteps.ai.

Leapsteps is provided by ZestRoot Inc., a corporation incorporated under the Canada Business Corporations Act, with its registered office at 861-5307 Victoria Drive, Vancouver, BC V5P 3V6, Canada ("we", "us"). We are the controller of the personal data described here.

1. The short version

• We collect what we need to run your account and keep your goals and tasks in sync.
• We don't sell your personal data, and we don't show ads. The app and this website contain no advertising or analytics trackers.
• When you use an AI feature, the text or recording needed for that request is sent to AI providers to produce the result.
• You can delete your account in the app at any time: open Settings and choose Delete account. Our account deletion page explains how to ask by email instead, and what we keep afterwards.

2. What we collect

Account information

Your email address and name, and a password if you sign up with email. Passwords are stored by our sign-in provider as a one-way hash, so no one can read them. If you sign in with Apple, Google or Microsoft, we receive your name, email address and, if the provider shares it, a link to your profile photo. If you use Apple's Hide My Email, we receive the relay address instead of your own. We also record your plan (Free or Pro), your trial dates, and when you accepted our Terms of Use.

Your content

What you create in Leapsteps: goals and their long-term, mid-term and short-term steps and notes; tasks, subtasks, comments, lists, labels, due dates, reminders and repeat settings; and projects and their objectives.

Teams and invitations

When you invite someone, we store their email address and send them an invitation email that includes your name and the project's name. When they join, you and they can see each other's name and email address.

Voice recordings

When you use voice capture, the app records your voice and sends the recording to our servers to be turned into text and then into tasks. We don't keep the recording after it has been transcribed. The app keeps a temporary copy on your device.

Device and usage information

• A random identifier the app creates when it's installed. We use it to keep the Free plan on one device and to prevent repeat free trials. It isn't an advertising identifier.
• Your device's platform, such as iOS or Windows.
• Records of how you use features: when the app opens, sign-ins, uses of AI and voice features, invitations sent and tasks assigned. We use them to apply daily usage limits and to understand which features are used.
• Your progress: XP, levels and achievements.
• Technical logs kept by our hosting providers, including IP addresses, to run and protect the service.

Purchases

If you subscribe to Pro, we receive your subscription status, the product you chose, and the dates of purchases, renewals and cancellations from Apple, Google or RevenueCat. We never receive your card number or other payment details: Apple, Google or Stripe handle payment.

Support messages

What you write to us. Feedback sent from the app also includes your app version, operating system version, language and plan, so we can find the problem.

The waitlist on this website

If you ask us to email you when Leapsteps is out on a device, we store your email address, the devices you chose, the date you asked and which version of the waitlist promise you agreed to.

Visits to this website

To learn which version of a page works better, this website counts page views, openings of the waitlist form, sign-ups and clicks on store links. With each count it sends the page, which version of it you saw, the device a button was for, and the site or campaign link that brought you here (only its domain or campaign name). We keep only daily totals. They contain nothing that identifies you, and nothing is stored on your device.

What we don't collect

We don't collect your location, contacts, photos or calendar, and we don't use advertising identifiers.

3. How we use it

If you're in the European Economic Area or the United Kingdom, the law requires a legal basis for each use. The table shows ours.

We don't use your content to train AI models, and we don't make decisions with legal or similarly significant effects about you by automated means.

4. AI features

These features send the following to AI providers when you use them:

• Goal drafting: the goal you describe and the details you add.
• Task ideas: your goals, the titles of your recent tasks and any instruction you add. For a project, also its objectives and recently finished tasks.
• Subtasks: the task's title, its existing subtasks and any instruction you add.
• Voice capture: your recording, and then its transcript.

We send these requests through OpenRouter, which passes each one to a company that hosts the AI model we use, currently Qwen models and Mistral's Voxtral. Before and after goal drafting, task ideas and subtasks, the request and the result are also sent to OpenAI's moderation service, which checks for harmful content.

You decide whether to share. AI features send nothing until you allow it. Before your first AI request, the app asks whether to share this data with AI. It names what is sent (the goal you describe, your task titles and notes, or your voice recording) and who receives it (OpenRouter, the AI model hosts it routes to, and OpenAI's moderation check). Content is sent only after you tap Allow, and we record on your account when you did. You can turn sharing off at any time in Settings > AI features. Once it's off, the app makes no new AI requests, and it asks again the next time you use an AI feature.

The providers we use don't train AI models on your requests. They may keep a request for a short time to run their service and prevent abuse.

We don't store your AI requests or their results, except what you choose to keep, such as tasks you accept. If a voice recording produces no tasks, our server log may keep a short excerpt of the transcript to help us fix the problem. Logs are deleted after 7 days.

AI output can be wrong. The Terms of Use explain how to use it.

5. Who we share it with

We don't sell your personal data or share it for targeted advertising. We share it only as described here.

Service providers

These companies process personal data for us, under contracts that limit them to providing their service:

Apple, Google and Microsoft

If you sign in with them or buy through their stores, they process your data under their own privacy policies.

Other Leapsteps users

Teammates see your name and email address. People in a project you share see the project, its tasks and their comments, and people you assign a task to can see that task. When you share a progress poster, it goes only where you send it.

Legal reasons and business changes

We may disclose data when the law requires it, or to protect the rights and safety of our users or others. If Leapsteps is merged or sold, your data may transfer to the new owner, who must follow this policy or tell you first.

6. Where your data is processed

Our main database is in the United States (Oregon), and our providers may process data in other countries. When we transfer personal data out of the European Economic Area, the United Kingdom or Switzerland, we rely on the European Commission's Standard Contractual Clauses or another lawful transfer mechanism.

If you're in Canada: your personal information is stored and processed outside Canada, including in the United States. While it's there, courts, law enforcement and national security authorities of that country may be able to access it under their laws.

7. How long we keep it

• Your account and content: while you have an account. Items you delete disappear from all your devices. We keep them on our servers, marked as deleted, so the deletion reaches every device, and erase them when you delete your account.
• When you delete your account: we erase your account and content from our database right away. Copies in our backups are overwritten within 7 days.
• What we keep after you delete your account:
  • A record that a free trial was used: the device identifier and a one-way hash of your email address, so the same person can't start repeat trials. Kept for 3 years after the trial.
  • Purchase records, as long as tax and accounting law requires, which in Canada is 6 years after the end of the tax year they relate to.
  • Content that belongs to other users: if you answered someone's invitation, your name and email stay in their invitation records, and comments you wrote on their tasks stay without your name.
• Data on your devices: deleting your account doesn't erase what the app stored on your devices. Uninstall the app to remove it.
• Invitations: expire after 14 days, and we keep the record with the inviting account.
• The waitlist: we delete your request for a device once we've emailed you that Leapsteps is out on it, or sooner if you ask.
• Support messages: for 2 years.
• Technical logs: for 7 days.

8. Your rights and choices

In the app

• Edit or delete your goals, tasks and other content at any time.
• Stop sharing data with AI: open Settings and, under AI features, turn off Share data with AI. The app then makes no new AI requests until you allow it again.
• Delete your account: open Settings and choose Delete account. Our account deletion page explains how to ask by email instead, and what we keep afterwards.
• Turn off microphone and notification access in your device's settings. Voice capture and reminders need them; the rest of the app works without them.

By email

Email support@leapsteps.ai from the address you sign in with to:

• get a copy of your personal data, in a portable format;
• correct data you can't change in the app;
• delete your data, or leave the waitlist;
• object to, or ask us to restrict, how we use your data;
• withdraw consent you've given.

We'll answer within one month and may ask you to confirm your identity first. Depending on where you live, these are legal rights, and you can also complain to your data protection authority.

Canada

We handle personal information under British Columbia's Personal Information Protection Act and Canada's Personal Information Protection and Electronic Documents Act. You can ask to see the personal information we hold about you, and to correct it. Our Privacy Officer is responsible for how we handle it; you can reach them at support@leapsteps.ai. If you're not satisfied with our answer, you can complain to the Office of the Information and Privacy Commissioner for British Columbia or the Office of the Privacy Commissioner of Canada.

California residents

You have the right to know what personal information we collect, use and disclose; to delete it; to correct it; and not to be discriminated against for using these rights. We don't sell or share personal information as the California Consumer Privacy Act defines those terms, and we don't use sensitive personal information to infer characteristics about you. An authorized agent can make a request for you, with proof of your permission.

9. Cookies, tracking and storage on your device

This website sets no cookies, stores nothing on your device and uses no advertising or third-party trackers. It counts visits only as the daily totals described in section 2. The app contains no advertising or third-party analytics tools.

The app stores your content, settings and its device identifier on your device, so it works offline and syncs when it can.

10. Security

Data is encrypted in transit between the app, our servers and our providers. Access rules in our database let each account read only its own data and what others have shared with it. No system is perfectly secure, so we can't guarantee absolute security. If a breach affects your data, we'll notify you and the authorities as the law requires.

11. Children

Leapsteps isn't meant for children under 13, or under the minimum age of digital consent where you live. We don't knowingly collect personal data from them. If you believe a child has given us personal data, email us and we'll delete it.

12. Changes to this policy

When we change this policy, we'll update the date at the top. If a change is significant, we'll tell you in the app or by email before it takes effect.

13. Contact us

Email support@leapsteps.ai, or write to ZestRoot Inc., 861-5307 Victoria Drive, Vancouver, BC V5P 3V6, Canada.

Leapsteps isn't currently offered in the European Union, the European Economic Area or the United Kingdom.